12 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Howto enable cryp...
FromSent OnAttachments
Daniel BachlerMay 16, 2003 7:28 am 
Stefan HornburgMay 16, 2003 7:58 am 
Joe LaffeyMay 16, 2003 9:01 am 
Joe LaffeyMay 16, 2003 9:13 am 
Joe LaffeyMay 16, 2003 9:52 am 
tibykeMay 17, 2003 12:15 am 
Daniel BachlerMay 18, 2003 7:01 am 
Joe LaffeyMay 18, 2003 9:27 am 
James A BakerMay 18, 2003 10:55 am 
cour...@interfacelounge.netMay 18, 2003 8:04 pm 
Joshua E WarcholMay 20, 2003 11:54 am 
RandyMay 20, 2003 12:13 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Howto enable crypted pwds for authmysql with php?Actions...
From:Daniel Bachler (Dan@gmx.net)
Date:May 18, 2003 7:01:55 am
List:net.sourceforge.lists.courier-users

On Sat, 17 May 2003 09:15:25 +0200, tibyke <tib@tibyke.hu> wrote:

my php crypt() generates a perfect md5 hashed password which works fine with courier imap. i use it for webmail users changing their passwords.

Did you give a special salt? If I just call crypt with the cleartext pwd the result is not valid...

On Fri, 16 May 2003 10:59:25 -0500 (CDT), Joe Laffey <jo@laffeycomputer.com> wrote:

You can try this small program I wrote. You system crypt library has to support MD5, though (I know BSDs do, not sure if newer glibc does or not) .

http://www.laffeycomputer.com/crypter.c

Tried it. It tells me there seems to be no MD5 available, however if I change the salt to $1$ + 8 chars it does not tell me that ... which, thinking about it is only normal since the salt is returned as the first thing in the string by crypt, right? Does that mean I do not have MD5 installed? (I'm not the administrator of the machine).

What happens if I do not have MD5 installed? Does authlib use crypt, or does it use its own md5 implementation? I tried to look at the source but could not find the implementation for authcheckpassword...

Also, I have to admit I do not really understand how the thing with the salt works. If I want to check a cleartext pwd against an encrypted, stored password I would have to use the same salt for both, I assume? But how to find that out?

On Sat, 17 May 2003 00:04:57 -0500, James A Baker <jaba@mac.com> wrote:

Courier's "userdbpw" will create both crypted and md5 passwords that work fine in postgres. Does it not work for you? -- Or did I miss something here?

I'm afraid I did not find it. Could you tell me where to look for it? I did a find on userdbpw in the courier directory but it did not turn up with anything. Is this tool optional?

Thanks for your patience, Daniel